globalnamespaceaccess

Documentation

Index

• Constants
• func CheckAccessToUpdateMembers(members []v3.Member, data map[string]interface{}, ownerAccess bool) error
• type MemberAccess
  • func (ma *MemberAccess) CheckCallerAccessToTargets(request *types.APIContext, targets []string, resourceType string, ...) error
  • func (ma *MemberAccess) EnsureRoleInTargets(targetProjects, roleTemplates []string, callerID string) error
  • func (ma *MemberAccess) GetAccessTypeOfCaller(callerID, creatorID, name string, members []v3.Member) (string, error)

Constants

const (
	ImpersonateUserHeader  = "Impersonate-User"
	ImpersonateGroupHeader = "Impersonate-Group"
	OwnerAccess            = "owner"
	ReadonlyAccess         = "read-only"
)

Functions

func CheckAccessToUpdateMembers

func CheckAccessToUpdateMembers(members []v3.Member, data map[string]interface{}, ownerAccess bool) error

CheckAccessToUpdateMembers checks if the request is updating members list, and if the caller has permission to do so

Types

type MemberAccess

type MemberAccess struct {
	Users              v3.UserInterface
	RoleTemplateLister v3.RoleTemplateLister
	PrtbLister         v3.ProjectRoleTemplateBindingLister
	CrtbLister         v3.ClusterRoleTemplateBindingLister
}

func (*MemberAccess) CheckCallerAccessToTargets

func (ma *MemberAccess) CheckCallerAccessToTargets(request *types.APIContext, targets []string, resourceType string, into interface{}) error

func (*MemberAccess) EnsureRoleInTargets

func (ma *MemberAccess) EnsureRoleInTargets(targetProjects, roleTemplates []string, callerID string) error

func (*MemberAccess) GetAccessTypeOfCaller

func (ma *MemberAccess) GetAccessTypeOfCaller(callerID, creatorID, name string, members []v3.Member) (string, error)